Managing a virtual persona through selective association

ABSTRACT

A technique is provided to generally provide user support across multiple accounts by allowing a single person or user to represent multiple organizations. An embodiment may typically provide support for a user to act on behalf of an account in the form of a virtual persona and also to provide the ability to manage the assignment of access rights allowing only prescribed privileged users to act on behalf of an account. This may then be accomplished through registration of a single identity for the user or person on the system, while allowing that person to then select the desired organization to represent for a particular session (which will be stored in the user&#39;s session).

BACKGROUND OF THE INVENTION

1. Field of the Invention

This present invention relates generally to privilege association withina multiple organization context and more specifically to managing avirtual persona through selective association with an organization froma plurality of organizations.

2. Description of the Related Art

Over the last few years many enterprises have deployed business tobusiness (B2B) e-commerce solutions. The major difference between B2Band business to consumer (B2C) solutions is that in a B2C solution acustomer typically shops on behalf of himself, whereas in a B2B solutionthe customer probably does not represent a person who is buying forhimself. Instead, the common B2B scenario is where a person buys onbehalf of an organization. Increasingly this person may buy on behalf ofmore than one division of an organization or even more than one company.When such a buyer, who represents multiple divisions or organizations,is purchasing from a single seller there is a need to distinguish his orher privileges and attributes per buyer organization he represents. Asan example, if Bob is a buyer for both ACME and EMCA organizations thenthe shipping addresses he is entitled to use when he buys for ACME willbe different from that of EMCA. Additionally, contractual entitlementswith the seller will be different with respect to the buyer organizationhe represents.

The typical solution to this issue, where there are multiple buyerorganizations, some of which may be represented by a single person, isto have the person register a separate identity for each buyer instancethey represent. This technique does solve the problem, but it has anumber of drawbacks including:

-   -   The buyer typically will have to maintain multiple identities on        the system with different user logon Ids and passwords.    -   Whenever the buyer needs to update their personal profile        information they will have to remember to manually update all        other identities to synchronize the identities they maintain on        the system.    -   When a site administrator gives a buyer a certain personal        privilege the administrator will have to determine all the        identities the buyer has on the system and assign this privilege        to each one of the buyer identities.    -   Having the person represented as a separate identity for each        buyer organization typically represents is a drain on the system        resources due to replication.

As the number of buyer organizations represented by a single buyerincreases the deficiencies listed previously typically becomesincreasingly unmanageable. For example using the diagram of FIG. 2,there is depicted a typical current multiple organization situation asmay be found in a commerce environment. While a commerce environment isused in the example, the example is not meant to be restricted to suchenvironments as the principles apply to similar situations andenvironments. The apex of multiple organization commerce system 200 isroot organization 205. Associated with root organization 205 are threebuyer organizations. Buyer A 225 organization has associated Buyer Ausers 245 and entitlement account A 250. The entitlement accountprovides a representation or instance of the customer/buyer. From aseller perspective, a seller does not deal with buyer organizations, butrather with accounts. The typical industry standard practice is to mapan account to an organization. In this way, when a buyer user becomesassociated with an organization within their session, they becomeentitled to shop on behalf of that organization's account, and alsoaccounts of any child organizations. Similarly Buyer B 220 hasassociated Buyer B users 240 and entitlement account B 255, while BuyerC 215 organization has associated Buyer C users 235 and entitlementaccount C 260. For a single seller 210 having store 270, it would benecessary to create a distinct buyer identity under each of the buyerorganizations in order to be able to shop on behalf of all three buyersas shown by the doffed arrow of Registered Customer role 280.

It would therefore be highly desirable to have a means for allowing amore efficient way to generally provide user support across multipleaccounts.

SUMMARY OF THE INVENTION

Conveniently, software exemplary of an embodiment of the presentinvention allows for a solution to the problem by allowing a singleperson to represent multiple organizations, for example the buyerorganizations of the previous example. An embodiment may typicallyprovide support for a user to act on behalf of an account in the form ofa virtual persona and also provide the ability to manage the assignmentof access rights allowing only prescribed privileged users to act onbehalf of an account. This may then be accomplished through registrationof a single identity for the user or person on the system, whileallowing that person to then select the desired buyer organization torepresent for a particular purchasing session (which will be stored inthe user's session). A user session is an effective persistence meansfor persisting state information across a series of requests from auser. The user session information may be typically stored on a serverrather than on a client basis. The list of buyer organizations availablefor representation may then be restricted to only those in which theuser plays the ‘Organization Participant’ role, thereby extending theprevious definition of the user to that of the virtual persona. When theuser chooses to represent a buyer organization in a purchasing session;attributes and privileges associated with this buyer organization arethen ‘inherited’ by virtue of the business logic using the buyerorganization to render information to be viewed or manipulated, therebydefining the persona instance. The attributes and privileges are thenremoved from the buyer when the buyer chooses to represent another buyerorganization (and replaced by those of the other buyer organization) orends the session.

Using this technique each user can become associated with any of thebuyer organizations for which the user is privileged. By making theassociation dynamic, content from the point of selection forward will betailored to the user and the buyer organization for which the user isactively shopping. The technique may also be used in other situationsnot related to the commerce buyer example being discussed.

In one embodiment of the instant invention there is provided a dataprocessing system-implemented method for directing a data processingsystem to manage a virtual persona within a user session throughselective association of the user with an organization from among aplurality of permitted organizations. The data processingsystem-implemented method comprising: selectively specifying theorganization from a plurality of permitted organizations; inheritingattributes and privileges associated with the selectively specifiedorganization; persisting the inherited attributes and privileges withthe session; and tailoring the session content in accordance with theinherited attributes and privileges.

In another embodiment of the instant invention there is provided a dataprocessing system for managing a virtual persona within a user sessionthrough selective association of the user with an organization fromamong a plurality of permitted organizations. The data processing systemcomprising: a selector for selectively specifying the organization froma plurality of permitted organizations; inheritance means for inheritingattributes and privileges associated with the selectively specifiedorganization; persistence means for persisting the inherited attributesand privileges with the session; and tailoring means for tailoring thesession content in accordance with the inherited attributes andprivileges.

In another embodiment of the instant invention there is provided anarticle of manufacture for directing a data processing system to managea virtual persona within a user session through selective association ofthe user with an organization from among a plurality of permittedorganizations. The article of manufacture comprising: a program usablemedium embodying one or more instructions executable by the dataprocessing system, the one or more instructions comprising: dataprocessing system executable instructions for selectively specifying theorganization from a plurality of permitted organizations; inheritingattributes and privileges associated with the selectively specifiedorganization; persisting the inherited attributes and privileges withthe session; and tailoring the session content in accordance with theinherited attributes and privileges.

Other aspects and features of the present invention will become apparentto those of ordinary skill in the art upon review of the followingdescription of specific embodiments of the invention in conjunction withthe accompanying figures.

BRIEF DESCRIPTION OF THE DRAWINGS

In the figures, which illustrate embodiments of the present invention byexample only:

FIG. 1 is a block diagram of a typical system in which an embodiment ofthe present invention may be implemented;

FIG. 2 is a block diagram of a current commerce situation which mayoperate using the system or systems of FIG. 1; and

FIG. 3 is a block diagram of an embodiment of the present invention asmay be supported by the system or systems of FIG. 1.

Like reference numerals refer to corresponding components and stepsthroughout the drawings.

DESCRIPTION OF THE PREFERRED EMBODIMENT

FIG. 1 depicts, in a simplified block diagram, a computer system 100suitable for implementing embodiments of the present invention. Computersystem 100 has a central processing unit (CPU) 110, which is aprogrammable processor for executing programmed instructions stored inmemory 108. Memory 108 can also include hard disk, tape or other storagemedia. While a single CPU is depicted in FIG. 1, it is understood thatother forms of computer systems can be used to implement the invention,including multiple CPUs. It is also appreciated that the presentinvention can be implemented in a distributed computing environmenthaving a plurality of computers communicating via a suitable network119, such as the Internet.

CPU 110 is connected to memory 108 either through a dedicated system bus105 and/or a general system bus 106. Memory 108 can be a random accesssemiconductor memory for storing components of an embodiment of thepresent invention as will be described later. Memory 108 is depictedconceptually as a single monolithic entity but it is well known thatmemory 108 can be arranged in a hierarchy of caches and other memorydevices. FIG. 1 illustrates that operating system 120 also may reside inmemory 108 as may other typical system utilities and services includingeditors and command processors.

Operating system 120 provides functions such as device interfaces,memory management, multiple task management, and the like as known inthe art. CPU 110 can be suitably programmed to read, load, and executeinstructions of operating system 120. Computer system 100 has thenecessary subsystems and functional components to implement support forembodiments of the present invention such as data structures as will bediscussed later. Other programs (not shown) include other serversoftware applications in which network adapter 118 interacts with theother server software application to enable computer system 100 tofunction as a network server via network 119.

General system bus 106 supports transfer of data between varioussubsystems of computer system 100. While shown in simplified form as asingle bus, bus 106 can be structured as multiple buses arranged inhierarchical form. Display adapter 114 supports video display device115, which is a cathode-ray tube display or a display based upon othersuitable display technology that may be used to depict results providedby an implementation of an embodiment of the present invention. TheInput/output adapter 112 supports devices suited for input and output,such as keyboard or mouse device 113, and a disk drive unit (not shown).Storage adapter 142 supports one or more data storage devices 144, whichcould include a magnetic hard disk drive or CD-ROM drive although othertypes of data storage devices can be used, including removable media forstoring data files such as those managed or obtained in support of animplementation of an embodiment of the present invention.

Adapter 117 is used for operationally connecting many types ofperipheral computing devices to computer system 100 via bus 106, such asprinters, bus adapters, and other computers using one or more protocolsincluding Token Ring, LAN connections, as known in the art. Networkadapter 118 provides a physical interface to a suitable network 119,such as the Internet. Network adapter 118 includes a modem that can beconnected to a telephone line for accessing network 119. Computer system100 can be connected to another network server via a local area networkusing an appropriate network protocol and the network server can in turnbe connected to the Internet. FIG.1 is intended as an exemplaryrepresentation of computer system 100 by which embodiments of thepresent invention can be implemented. It is understood that in othercomputer systems, many variations in system configuration are possiblein addition to those mentioned here.

Although FIG. 1 shows functions being performed within a single system,system 100, it is likely that the actual embodiments would employseveral servers and systems functioning cooperatively to manage largenumbers of users. The various functions just described may bedistributed among several data processing systems as dictated byprocessing needs while communicating as required through a network 119such as the Internet via network adapter 118. The functions may belogically separate while on a single physical system as shown orphysically separate and dispersed among a plurality of interconnectedsystems without impact on the basic principles and service.

In a more particular illustration of an embodiment of the presentinvention, FIG. 3 is a block diagram illustrating a similar multipleorganization system as in FIG. 2. It is noted that as before in FIG. 2line 280 represents the Registered Customer role, which indicates thatthe user is allowed to shop in the seller's store. However Line 285 hasbeen added (not evident in FIG. 2) representing the OrganizationParticipant role, and indicates that Buyer A User 245 is allowed to shopon behalf of Buyer B Organization 220, and likewise that Buyer C User235 is allowed to shop on behalf of Buyer B Organization 220. This newcapability allows the user of one organization to perform actions onbehalf of another organization in the form of a virtual persona throughselective association with that organization.

Upon authentication to the site, the buyer is presented with a selectionof buyer organizations for which he is allowed to act on behalf. Thebuyer is only allowed to choose one of the organizations (A, B, or C) asthe buyer cannot simultaneously be a buyer for two or moreorganizations. Upon selection of a buyer organization, the user'ssession is populated appropriately to indicate the organization, forwhich the buyer is acting on behalf, for all subsequent requests therebyassuming the persona related to the selected organization.

The business logic that processes the requests submitted by the buyerneeds to process information with respect to the buyer organizationwithin the user's session. As an example, if the business logic isdisplaying possible shipping addresses to a user who has Buyer A 225 asthe active organization in the session, then only the shipping addressesof that buyer organization should be displayed. Stated broadly, thebusiness logic then allows any operation data on the site to be scopedto the currently active organization. For example, order history,requisition lists, user preferences can all be filtered based on thecurrently active organization.

The buyer may then switch buyer organizations at anytime, for example bygoing to a form to select a buyer organization from a list of availableorganizations for which the buyer is allowed to represent. Also, whenthe buyer ends the current session either by closing the browser or bylogging off from the site any buyer organization association previouslyin effect is terminated and the data is removed from the server.

Implementation of an embodiment of the present invention typicallycomprises components for: use of a role to indicate the ability to acton behalf of an organization; use of the user's session to find thedesired buyer organization; and a capability of setting the organizationwithin a user's session.

The use of a role indicates a buyer ability to act on behalf of anorganization. The concept of a role is therefore used to indicate theability to act on behalf of an account, establishing an active persona.By granting a user the ‘Organization Participant’ role in anorganization, it implies that the user can shop using any account(s)owned by that organization or any of its descendant organizations,thereby establishing the scope of the current persona.

Having all components use the session information to find the activeorganization provides a different approach from previousimplementations. Unlike previous solutions, whereby entitlement wasdriven based on the user's location in an organizational hierarchy,embodiments of the present invention leverage a user's session to storethe active organization. This information maintained on a server maythen be leveraged to target promotions and campaigns, or to filtercontent for display purposes. Additionally the active organization inthe session may be used for access control purposes, thereby enablingcertain privileges; the user may be entitled to perform actions againstresources based on the organization that is being represented.

Further support is provided for the setting of the organization withinthe user's session. In one embodiment of the present invention there maytypically be provided an operation or transaction that can be used toswitch the organization in the user's session. The change is madepermanent until another organization is selected through this operation.This capability typically encompasses access control for restrictingselections to enabled users, and the transaction “setting” logic itself.

For example, in a sample implementation as shown in FIG. 3 a user canshop on behalf of any organization where the user has been permitted tohave the ‘Organization Participant’ role (one organization at a time ispermitted). The organization Id for this organization becomes part ofthe user's session information, and is leveraged by session dependentobjects including access control, contracts, promotions, and product orservice order components.

It may be seen that Buyer A 22 user is granted the ‘OrganizationParticipant’ role 285 in the Buyer B 220 organization. This means thatBuyer A 225 can shop on behalf of accounts owned by his own organizationAccount A 250 or by Buyer B 220 organization and Account B 255. Thepersona of Buyer A has been enabled to allow selection of roles ineither A or B organizations. In a similar manner Buyer C 215 can shop onbehalf of accounts owned by his own organization Account C 260 or byBuyer B 220 organization and Account B 255

An external interface may be used to provide a transaction or similarmechanism by which a user such as Buyer A User 245 becomes associatedwith an organization such as Buyer A 225 or Buyer B 220. Typical accesscontrol mechanisms ensure that a user can only associate with anorganization if the user is entitled to do so through the organizationalhierarchy providing a means for inheritance or the ‘OrganizationParticipant’ role 285.

In an embodiment of the present invention, all roles are typicallyscoped to an organization such as that of Buyer A 225. Therefore, theconcept that a user can be granted a role allowing that user to shop onbehalf of an organization can typically be modelled using existing roleassignment mechanisms. Administrators with authority to grant roles in aparticular organization will now have the authority to grant an‘Organization Participant’ role 285. Once a user has been granted thisrole the user is permitted to select a specific organization and itsdescendants other than the user's own organization to shop on theirbehalf. This action extends the scope of the user by defining a virtualpersona to include enable use of additional permitted organizations.

In support of selecting an organization the user interface aspect of anembodiment provides a persistence feature on a web site for examplewhereby a user can at point in time select from those allowedorganizations on whose behalf the user can shop. A selector for examplein the form of a selection box may be typically provided that ispopulated with a list of organizations in which the user may assume‘Organization Participant’ role 285, as well as organizations in theuser's ancestor hierarchy.

The selection of an organization will then typically cause the user'ssession data to be updated. The persistence mechanism for the user'ssession may be realized through an implementation that will store thecurrently active organization scoped to the active store, such as store270. An interface to this mechanism may be provided as in the codesnippet below: /** * Sets the active organization. * @param value Theactive organization. */ public void setActiveOrganization(java.lang.LongnOrganization){ inActiveOrganization = nOrganization; } /** * Gets theactive organization. * @return The active organization. */ publicjava.lang.Long getActiveOrganization( ){ return inActiveOrganization; }

A session API to support the getting and setting of the activeorganization identifier such as Buyer A 225 is typically provided. Forexample in a typical commerce system instance there may be multiplestores deployed. The concept of an active organization within a user'ssession is store specific; therefore the actual setting of the activeorganization comes from the store session data. When the user navigatesto a different store, the active organization is dynamically set orunset within the user's session as in the following:

-   -   sessionData.setActiveOrganization(storeContainer.getActiveOrganizationId(        ));

Setting the active organization identifier in the user's session fromthe store data may be accomplished by an organization switchinginterface. An example of such an interface follows: /** * Determineswhether the user is allowed to switch to the specified * organization. *@return True if the switch is allowed. */ protected booleanisSwitchAllowed( ) throws ECException{ // true if the organization andits ancestors are unlocked, and if the // user is allowed to switch tothe organization (either is a descendant, // or plays the ‘OrganizationParticipant’ role in this organization) return (!isAncestralOrgsLocked() && (isParentOrganization( ) || isReguiredRolePlayed ( ))); } /** *Updates the user's session to reflect the new active organization. * *@throws ECException If there are failures with the update. */ protectedvoid updateSession( ) throws ECException{session.setActiveOrganization(inOrganizationId); }

An interface to switch the organization in the user's session may beprovided using helper methods as outlined in the previous code snippet.The isSwitchAllowed( ) method in the example may be used to determine ifthe user is even permitted to switch to the selected organization. Logicin an embodiment of an organization switch interface typically containsconditions that must be satisfied prior to permitting a user to switchto an organization. One condition may be that the organization, and allof its ancestors, must not be locked; while another condition may be theuser must either be a descendant of the organization, or must be granted‘Organization Participant’ role 285 in the organization, as in theprevious example. These conditions may be combined in a sequentialmanner.

A second helper method as provided in the example may be used to set theorganization in the user's session. The basic logic of a typicalembodiment may be designed to first determine whether the user isallowed to switch to the requested organization and if so to persist theswitch results by updating the user's session.

Further there may be provided another type of organization switchingmechanism that permits a switch back to a user's homeorganization—effectively unsetting the organization in the user'ssession. In providing this support a user such as Buyer A User 245 maythen be allowed to switch back to their parent organization Buyer A 225organization, regardless if that organization had been locked.

Further use of the context sensitive support may be evident inleveraging the organization identifier stored in the user's session,where it can be read by other sensitive components as part of theirlogic. Enabling adaptive processing based on the organization identifierprovides a tailoring means of dynamic support functions. For examplesupport for the organization identifier context may be used to provide:

-   -   a context sensitive contract selection mechanism in which the        list of available contracts will be based upon, among other        criteria, the active organization;    -   a context sensitive selection means in which promotions can be        targeted to particular organizations wherein the runtime        evaluation of these promotions can be based on the organization        in the user's session;    -   a context sensitive order display means for displaying only        those orders placed on behalf of the currently active        organization, in which the user's orders would be filtered based        on the currently active organization;    -   a context sensitive patient record selection mechanism in which        the list of patient records will be based upon, among other        criteria, the active organization associated with the mobile        doctor;    -   a context sensitive address book display means for displaying        the user's address book, in which the user's personal addresses        as well as the addresses of the currently active organization        would be displayed.

Other operations typical of an exemplary commerce application includingcontext dependent functional support are related to orders, quotes andshopcarts are typical of support provided by these techniques. Similarrespective examples in other commercial or non-commercial applicationshould also be included.

It should be understood that the present invention can be realized inhardware, software a propagated signal or combination thereof. Any kindof computer/server system(s)—or other apparatus adapted for carrying outthe methods described herein—is suited. A typical combination ofhardware and software could be a general purpose computer system with acomputer program that when loaded and executed carries out therespective methods described herein. Alternatively a specific usecomputer containing specialized hardware for carrying out one or more ofthe functional tasks of the invention could be utilized. The presentinvention can also be embedded in a computer program product or apropagated signal which comprises all the respective features enablingthe implementation of the methods described herein and which when loadedin a computer system is able to carry out these methods. Computerprogram, propagated signal software program, program or software in thepresent context mean the expression in any language code or notation ofa set of instructions intended to cause a system having an informationprocessing capability to perform a particular function either directlyor after either or both of the following: (a) conversion to anotherlanguage, code or notation; and/or (b) reproduction in a differentmaterial form.

Of course, the above described embodiments are intended to beillustrative only and in no way limiting. The described embodiments ofcarrying out the invention are susceptible to many modifications ofform, arrangement of parts, details and order of operation. Theinvention, rather, is intended to encompass all such modification withinits scope, as defined by the claims.

1. A data processing system-implemented method for directing a dataprocessing system to manage a virtual persona within a user sessionthrough selective association of the user with an organization fromamong a plurality of permitted organizations, tile data processingsystem-implemented method comprising: initiating a Java session betweena third parts enterprise and a user, wherein the user is initiallyassociated with a fist organization from a plurality of permittedorganizations; selectively specifying a second organizations from theplurality of permitted organizations, as being an organization for whichthe user is authorized to act as an agent of the second organization;inheriting attributes and privileges from Java objects associated withthe second organization to Java objects associated with the firstorganization; persisting the inherited attributes and privileges of Javaobjects used in the session; tailoring content of the session inaccordance with the inherited attributes and privileges; and in responseto the user closing a browser used by the user in the session,terminating the user's authority to act on behalf of the secondorganization by deleting attributes and privileges inherited by the Javaobjects associated with the first organization from the Java objectsassociated with the second organization.
 2. The data processingsystem-implemented method of claim 1, wherein the Java session iscontrolled by a session Java bean in a server that directs content tothe user, and wherein the session Java bean filters and enhances contentsent from a seller to the user w the user is representing the secondorganization.
 3. The data processing system-implementable method ofclaim 1, wherein the step of selectively specifying further comprises:determining the selected organization and associated ancestors notlocked; and determining the user is at least one of a descendant of thespecified organization or has “Organization Participant” role in thespecified organization.
 4. The data processing system-implementablemethod of claim 2, wherein the Java session is between a patient recordsdatabase and the user who is a mobile health care professional, andwherein the mobile health care professional is permitted to accessrecords for a selected organization, from the plurality of permittedorganizations, as described by the session Java bean.
 5. The dataprocessing system-implemented method of claim 1, wherein the user isable to represent to the third party enterprise, a single one of theplurality of permitted organizations by using another organization fromthe plurality of permitted organizations as a gateway to the third partyenterprise.
 6. The data processing system-implemented method of claim 1,wherein the step of tailoring further comprises at least oneorganization dependent function enabling session context sensitiveprocessing using the inherited attributes and privileges to direct thedependent function processing of objects including contract entitlement,promotion determination, pricing quotations, targeted advertising,addressing and orders, quotes and shopcart processing.
 7. The dataprocessing system-implemented method of claim 1, wherein the step ofselectively specifying further comprises scoping information for acurrently active organization to an active store.
 8. The data processingsystem-implemented method of claim 1, wherein the plurality of permittedorganizations further comprises organizations for which the user hasbeen assigned a participant privilege role,’ thereby enabling the userto act on behalf of the organizations.
 9. A data processing system formanaging a virtual persona within a user session through selectiveassociation of the user with an organization from among a plurality ofpermitted organizations, the data processing system comprising: aninitiator for initiating a Java session between a third party enterpriseand a user, wherein the user is initially associated with a firstorganization from a plurality of permitted organizations; a selector forselectively specifying a second organization from the plurality ofpermitted organizations, as being an organization for which the user isauthorized to act as an agent of the second organization; inheritancemeans for inheriting tributes and privileges from Java objectsassociated with the second organization to Java objects associated withthe first organization; persistence means for persisting the inheritedattributes and privileges of Java objects used in the session; tailoringmeans for tailoring content of the session in accordance with theinherited attributes and privileges; and terminating means for, inresponse to the user closing a browser used by the user in the session,terminating the user's authority to act on behalf of the secondorganization by deleting attributes and privileges inherited by the Javaobjects associated with the first organization from the Java objectsassociated with the second organization.
 10. The data processing systemof claim 9, wherein the Java session is controlled by a session Javabean in a server that directs content to the user, and wherein thesession Java bean filters and enhances content sent from a seller to theuser while the user is representing the second organization.
 11. Thedata processing system of claim 9, wherein the selector for selectivelyspecifying further comprises determination means for: determining theselected organization and associated ancestors not locked; anddetermining the user is at least one of a descendant of the specifiedorganization or has ‘Organization Participant’ role in the specifiedorganization.
 12. The data processing system of claim 10, wherein theJava session is between a patient records database and the user who is amobile health care professional and wherein the mobile health careprofessional is permitted to access records for a selected organizationfrom the plurality of permitted organizations, as described by thesession Java bean.
 13. The data processing system of claim 9, whereinthe selector for selectively specifying further comprises specificationof a parent organization, wherein organization switching occursregardless of organization lock status.
 14. The data processing systemof claim 9, wherein the tailoring means further comprises at least oneorganization dependent function enabling session context sensitiveprocessing using the inherited attributes and privileges to direct thedependent function processing of objects including contract entitlement,promotion determination, pricing quotations, targeted advertising,addressing and orders, quotes and shopcart processing.
 15. The dataprocessing system of claim 9, wherein the selector for selectivelyspecifying further comprises scoping information for a currently activeorganization to an active store.
 16. The data processing system of claim9, wherein the plurality of permitted organizations further comprisesorganizations for which the user has been assigned a participantprivilege role, thereby enabling the user to act on behalf of theorganizations.
 17. A computer program product for directing a dataprocessing system to manage a virtual persona within a user sessionthrough selective association of the user with an organization fromamong a plurality of permitted organizations, the computer programproduct embodied on a program usable medium embodying instructionsexecutable by the data processing system, said instructions comprising:data processing system executable instructions for initiating a Javasession between a third party enterprise and a user, wherein the user isinitially associated with a first organization from a plurality ofpermitted organizations; data processing system executable instructionsfor selectively specifying a second organization from the plurality ofpermitted organizations, as being an organization for which the user isauthorized to act as an agent of the second organization; dataprocessing system executable instructions for inheriting attributes andprivileges from Java objects associated with the second organization toJava objects associated with the first organization: data processingsystem executable instructions for persisting the inherited attributesand privileges of Java objects used in the session; data processingsystem executable instructions for tailoring content of the session inaccordance with the inherited attributes and privileges; and dataprocessing system executable instructions for, in response to the userclosing a browser used by the user in the session terminating the user'sauthority to act on behalf of the second organization by deletingattributes and privileges inherited by the Java objects associated withthe first organization from the Java objects associated with the secondorganizations.
 18. The computer program product of claim 17, wherein thedata processing system executable instructions for selectivelyspecifying further comprises data processing system executableinstructions for specification of an alternate permitted organizationother than a user parent organization.
 19. The computer program productof claim 17, wherein the data processing system executable instructionsfor selectively specifying further comprises data processing systemexecutable instructions for: determining the selected organization andassociated ancestors not locked; and determining the user is at leastone of a descendant of the specified organization or has ‘OrganizationParticipant’ role in the specified organization.
 20. The computerprogram product of claim 17, wherein the data processing systemexecutable instructions for inheriting farther comprises data processingsystem executable instructions for acquiring access control determinedprivileges for the specified organization.
 21. The computer programproduct of claim 17, wherein the data processing system executableinstructions for selectively specifying further comprises dataprocessing system executable instructions for specification of a parentorganization, wherein organization switching occurs regardless oforganization lock status.
 22. The computer program product of claim 17,wherein the data processing system executable instructions for tailoringfurther comprises data processing system executable instructions for atleast one organization dependent function enabling session contextsensitive processing using the inherited attributes and privileges todirect the dependent function processing of objects including contractentitlement, promotion determination, pricing quotations, targetedadvertising, addressing and orders, quotes and shopcart processing. 23.The computer program product of claim 17, wherein the data processingsystem executable instructions for selectively specifying furthercomprises data processing system executable instructions for scopinginformation for a currently active organization to an active store. 24.The computer program product of claim 17, wherein the plurality ofpermitted organizations further comprises organizations for which theuser has been assigned a participant privilege role, thereby enablingthe user to act on behalf of the organizations.
 25. (canceled)
 26. Amethod comprising: initiating a Java session between a first buyer and aseller; and establishing an authority for a user of a second buyer,which has not initiated a Java session with the seller, to participatein the Java session between the first buyer and the seller by causingattributes of the user of the second buyer to be inherited into a Javasession bean used by the first buyer in the Java session between thefirst buyer and the seller.